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Abstract 

We study permutation groups of given minimal degree without the classical primitivity as- 
sumption. We provide sharp upper bounds on the order of a permutation group H < S n of 
minimal degree m and on the number of its elements of any given support. These results con- 
tribute to the foundations of a non-commutative coding theory. 

A main application of our results concerns the Hidden Subgroup Problem for S n in Quan- 
tum Computing. We completely characterize the hidden subgroups of S n that can be distin- 
guished from identity with weak Quantum Fourier Sampling, showing these are exactly the 
subgroups with bounded minimal degree. This implies that the weak standard method for S n 
has no advantage whatsoever over classical exhaustive search. 
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1 Introduction 



Let S n denote the symmetric group on {1, . . . , n}. For a permutation h G S n define its support 

supp(h) by 

supp(h) = {i G {1, . . . , n} : h(i) ^ i}. 

The minimal degree m(H) of a permutation group 1 ^ H < S n is defined to be the minimal 
number of points moved by a non-identity element of H. In other words, 

m(H) = min{\ supp(h)\ : 1 7^ h G i?}. 

This notion goes back to the 19th century, and plays an important role in the theory of finite permu- 
tation groups since the days of Jordan I J or73llJor75l . Particular attention was given to the minimal 
degree of primitive permutation groups. Recall that a permutation group is called primitive if it is 
transitive and doesn't preserve a non-trivial block system. Let H < S n be a primitive permutation 
group not containing A n . Jordan proved that m{H) goes to infinity as n goes to infinity. Babai 
IBab81 1 showed that under the above conditions we actually have that 

m ( H ) > ^—1. 
\ > - 2 

This result is essentially best possible. However, if we exclude certain primitive groups and use 
the Classification of Finite Simple Groups (CFSG), sharper bounds can be obtained. Indeed, it was 
shown by Liebeck and Saxl in [LS91 ] that m(H) > re/3 with a given list of exceptions. This lower 
bound was improved by Guralnick and Magaard in [GM98| to n/2 (with prescribed exceptions). 
See also Cameron [Cam81 1 for the impact of the Classification on the theory of finite permutation 
groups and primitive groups in particular. 

In spite of considerable progress in the study of the minimal degree of primitive groups, much 
less is known in the non-primitive case. One of the purposes of this paper is to study permutation 
groups of given minimal degree without assuming primitivity or even transitivity. 

A basic question in this field is: how large can a permutation group H of degree re and minimal 
degree m be? An easy classical upper bound is \H\ < n n ~ m+1 . Indeed, this follows from the fact 
that a permutation h G H is uniquely determined by its action on {1, . . . , re — m + 1}. 

Better bounds were given by Liebeck [L82, L84| under the assumption that H is transitive. Our 
first result extends Liebeck's theorem to arbitrary permutation groups. 

Theorem A. Let H < S n be a permutation group with minimal degree m = m{H). 

1) Ifm < log 2 n, then \H\ < n Wn / m . 

2) Ifm > log 2 n, then \H\ < 2 10n . 

Theorem El is essentially best possible. For example, consider the group H = S 2ri/ / m < S n 
acting on 2n/m blocks of size m/2. Then the minimal degree of H is m and \H\ = (2n/m)! 
which is of the form n^ 2 ~ ^ n ^ m when m < log 2 n. Up to a constant in the exponent, this shows 
that part (1) of Theorem|A]is tight. 

Note also that if H < S n is transitive of minimal degree m and base size b, then bm > n (see 
e.g. [DM96|, p. 80), and this implies \H\ > 2 b > 2 n / m . 

Subgroups of S n of given minimal degree m can be regarded as non-commutative analogues of 
linear codes with minimal distance m. Recall that in coding theory [MS77] a fundamental question 
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is: how large can a subspace of GF{q) n with minimal distance m be? Replacing the Abelian group 
GF(q) n by the symmetric group S n we may ask a similar question in this context. Theorem 1X1 
provides a rather sharp answer. 

Note that any binary linear code inside GF{2) n / 2 can be embedded naturally as a subgroup 

n /2 

of S 2 < S n . Thus classical coding theory provides a rich source of constructions of permuta- 
tion groups of large minimal degree. In particular the (obvious) Gilbert- Varshamov lower bound 
([GGL96] p. 781, remark after Thm. 3.5) applied to linear codes produces exponentially large ele- 
mentary Abelian permutation groups with large minimal degree, e.g. m > n/8. This demonstrates 
the tightness of part (2) of Theorem|Aj even when m is very large. 

Another classical question in coding theory is the study of the weight distribution, namely count- 
ing elements of weight A; in a code with minimal distance m. The analogous question for permu- 
tation groups is counting the number of elements of support A; in a permutation group of minimal 
degree to. Given a permutation group H < S n define 



the subset of elements of support k in H. In our second result, which is the most technically 
demanding, we bound the size of 

Theorem B. There exists absolute constants b, e > such that if a subgroup H < S n has minimal 
degree m > b then 



The theorem has an interesting consequence for the number of elements of minimal support. If 
k = m < n 2e then (/c!) 1 / 4 < n em l 2 and this implies 



This upper bound is essentially tight. To show this we use some results from coding theory and 
the above embedding of binary codes in S n . Consider the well known Goppa code [G70] and the 
estimates for the number of code words of minimal weight [LL97|. For a binary Goppa code over 
GF(2) n / 2 , in the regime of small t (t <C y/log n), the number of code words of minimum weight 
2t + 1 is roughly (up to a constant factor) 



Embedding this code into S n as above, we obtain a subgroup H < S n of minimal degree m = 4t+2 
satisfying 



for some constant c > 0. This demonstrates the tightness of Theorem |B]in the regime of small m. 

A main motivation behind Theorem|Bl besides the study of weight distributions of non-commutative 
codes, comes from Quantum Computing. A central problem in Quantum Computing is the Hidden 



H k = {heH : \supp(h)\ = k} 
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Subgroup Problem (HSP), which we state below. Let G be a finite group and H < G a subgroup. 
Given a function / : G — > S that is constant on (left)-cosets gH of H and takes different values 
for different cosets, determine a set of generators for H. The decision version of this problem is to 
determine whether there is a non-identity hidden subgroup or not. 

Note that given g G G we have g G H if and only if /(g) = /(l). Using classical search 
we may therefore perform membership tests, and once we find a non-identity element g G we 
may conclude that H ^ 1. However, the aim is to decide whether or not H = 1 in polynomial 
time, namely after (log |G|) C steps. Complete enumeration over the elements g G G is therefore 
not efficient. The question is whether a quantum computer can solve the HSP efficiently (giving the 
correct answer in polynomial time with a very high probability). 

The Hidden Subgroup Problem plays a central role in Quantum Computing. Nearly all quantum 
algorithms which significantly improve the known classical algorithms, like factoring and discrete 
log, solve the Abelian version of this problem by the so called standard method of Quantum Fourier 
Sampling. One of the most important questions is whether the standard method can efficiently solve 
the non-Abelian HSP, especially for the symmetric group G = S n . This latter case in particular 
would yield a quantum algorithm for the Graph Isomorphism Problem, for which no efficient clas- 
sical algorithm is known. For more details on Quantum Computing, the HSP, and the standard 
method see Section [2] 

To state our main quantum-theoretic application in a precise mathematical way we need some 
notation. Given a finite group G let Irr(G) denote the set of (complex) irreducible representations 
of G (up to equivalence). For p G IrrG let d p denote its dimension and xp its character. 

Given a subgroup H < G, define 

Dh = W\ £ dp] ^ Xp{h)V (1) 

Roughly speaking, Dh measures the Li-distance between a (non-commutative) Fourier trans- 
form of the characteristic function of H and that of the characteristic function of the identity. 
We say that a subgroup H < G is distinguishable if 

D H > (log|G|)- c 

for some constant c. Of course this is an asymptotic notion, where we think of G as ranging over 
an infinite family of groups, whereas the constant c does not depend on G. Here we focus on the 
case G = S n , where distinguishability is equivalent to Dh > n~ c . Distinguishable subgroups H 
are those which can be distinguished from 1 using the so called weak standard method (see the next 
section for more details). 

The main application of this paper to Quantum Computing, which relies heavily on Theorem 151 
above, is the following. 

Theorem C. Let H < S n be a subgroup. If H is distinguishable, then it has a bounded minimal 
degree. Moreover, if Dh > rT c , then m{H) < g(c), where g(x) = ax + b is some fixed linear 
function. 

Thus all subgroups of unbounded minimal degree are indistinguishable, which opens up a huge 
spectrum of examples and constructions. The only case previously known in the literature of an 
indistinguishable subgroup of S n is that of a subgroup of order 2 generated by a fixed point free 
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involution or by a product of transpositions of large support I HRTOOl IGS V V P 1 ]. Obviously m(H) 
is unbounded for such subgroups H, so its indistinguishablity is an immediate consequence of the 
above theorem. 

In an extended abstract [ KS05 1 a subset of the authors of this paper have proved a weaker version 
of Theorem|C](for primitive subgroups and subgroups of polynomial size) and have conjectured that 
it holds in full generality This paper proves the conjecture. 

It is intriguing that much larger subgroups are also indistinguishable. Indeed take H = Si n i m < 
S n , the subgroup constructed following Theorem A. If m = m(H) tends to infinity arbitrarily 
slowly then H is indistinguishable and \H\ > (n\) £ ( n > where e(n) tends to arbitrarily slowly. In 
particular, the size of indistinguishable subgroups of S n can be super-exponential in n. 

However, if e > is fixed, and \H\ > (n!) e , then it follows from Theorem A that the minimal 
degree of H is bounded. Enumerating over elements of S n of bounded support (their number is 
bounded by a polynomial in n) we deduce that such a subgroup H can be distinguished from 1 
using classical search. 

It follows from the two paragraphs above that all subgroups H < S n of size > N can be 
distinguished from 1 using the weak standard method (together with classical search) if and only if 
N > {n\) e where e is bounded away from zero. 

Theorem C has rather grave consequences. Indeed, if H is distinguishable then it has an element 
of bounded support, and this can be detected (as above) after polynomially many membership tests 
(when we enumerate the permutations in S n according to their support). 

Corollary D. Any subgroup H < S n which is distinguishable can already be distinguished from 1 
using classical search. 

Thus Theorem C provides a complete characterisation of hidden subgroups H < S n which can 
be distinguished from 1 using the weak standard method and classical search: these are precisely 
the subgroups of bounded minimal degree. 

It is intriguing that the old classical notion of minimal degree, which is central in the theory of 
finite permutation groups, plays a role in the context of quantum computing. The Classification of 
Finite Simple Groups (CFSG) is also used in an essential way in some parts of this work. 

Some words on the structure of this paper. In Section |2] we provide background on quantum 
computing, the Hidden Subgroup Problem, and the standard method of Quantum Fourier Sampling. 
Section |3] deals with arbitrary finite groups G and their subgroups H. Using character-theoretic 
methods we give upper and lower bounds on the Li-distance Dh introduced above. We then charac- 
terize distinguishable subgroups of polylogarithmic size. In Section|4] we focus on the case G — S n . 
We prove there (relying on CFSG and other tools) that any primitive subgroup H < S n not contain- 
ing A n is indistinguishable. We also show how to deduce Theorem C from Theorem B. Theorem 
A is proved in Section |5] Section |6] which is the longest in this paper, is devoted to the proof of 
Theorem B. This proof applies Theorem A as well as results on primitive groups obtained in Section 

El 
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2 Quantum Computing 



In the last decade quantum computation has provided us with powerful tools to solve problems not 
known to be classically efficiently solvable, like factoring and discrete log [Sho94|. Nearly all the 
problems in which a quantum computer excels more than quadratically with respect to its classical 
counterpart can be cast into the framework of the Hidden Subgroup Problem (HSP). Let G be a 
finite group and H < G a subgroup. Given a function / : G —> S that is constant on (left)-cosets 
gH of H and takes different values for different cosets, determine a set of generators for H. The 
decision version of this problem is to determine whether there is a non-identity hidden subgroup or 
not. 

The reason that quantum computers seem to provide a speed-up for this type of problem is that 
it is possible to implement the Fourier transform over certain groups efficiently on a quantum com- 
puter. This in turn allows to sample the Fourier components efficiently (this technique of Quantum 
Fourier Sampling is referred to as the "standard method"). In the case of Abelian groups G (appear- 
ing in factoring and discrete log) the hidden subgroup can be reconstructed with only a polynomial 
(in log |G|) number of queries to the function and a polynomial number of measurements (samplings 
in the Fourier basis) and postprocessing steps. 

We denote states of the vector space C[G], spanned by the group elements, with a |-), as is 
standard in quantum computation (see e.g. [NCOO] for more details). 

Definition 1. The Quantum Fourier Transform ( QFT) over a group G is the following unitary 
transformation on C[G]: 



where p labels an irreducible representation of G, d p is its dimension and 1 < i,j < d p . The 
1/9, span another basis ofC[G], the so called Fourier basis. 

For many non-Abelian groups it is possible to implement the Fourier transform on a quan- 
tum computer efficiently, and in particular explicit constructions exist for the symmetric group S n 



Addressing the HSP in the non-Abelian case is considered to be one of the most important 
challenges at present in quantum computing. A positive answer to the question whether quantum 
computers can efficiently solve the Hidden Subgroup Problem over non-Abelian groups would have 
several important implications for the solution of problems in NP, which are neither known to be 
NP-complete nor in P; and which are good candidates for a quantum speed-up. Among the most 
prominent such problems is Graph Isomorphism, where the group in question is the symmetric 
group. Hence it is very desirable to get a handle on the power of Quantum Fourier Sampling (QFS) 
to solve the HSP for general groups. 

Definition 2. The standard method of Quantum Fourier Sampling is the following: The state is 
initialised in a uniform superposition over all group elements; a second register is initialised to |0). 
Then the function f is applied reversibly over both registers (i.e. f : \g)\0) — > \g)\f(g)))- The 
second register is measured, which puts the first register into the superposition of a (left)-coset of 
H, i.e. in the state \gH) := ,| YlheH \ 9 h) for some random g G G. Finally the QFT over G is 




IBea97l . 
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performed, yielding the state 



V\ G W H \ n.U hGH 



p,i,j h£H 

A basis measurement now gives (p, i,j) with probability P 9 h(p, = \g\\h\ I S/ieH Pij{9^)\ 2 ■ 

Since we do not know g and g is distributed uniformly, we sample (p,i,j) with probability 
^ H = JU\ PgH- ^ ne stron 8 standard method samples both p and its entries i, j. In the weak 
standard method only the character \p is measured (but not the entries i, j, which are averaged over). 
In this case it is not hard to see I HR T00I IGS V VP ll that the probability to sample p is independent 
of the coset of H we happen to land in. Hence the probability to measure p in the weak case is 

1 1 hen 

Note that from this expression it is clear that the weak standard method cannot distinguish between 
conjugate subgroups [HRT00|. Let Irr(G) be the set of irreducible characters of G. Then Pjj 
is a distribution on Irr(G). The strong standard method sometimes provides substantially more 
information than its weak counterpart, and is indeed necessary to efficiently solve the HSP in the 
case of groups like the Dihedral group [EH99l |Kup03| Reg04] and other semidirect product groups 
[MRRS04]. However (see below), for S n Grigni et al. GSVV01 ] have shown that for a random ba- 
sis the additional information provided by the strong method is exponentially small except possibly 
for very large subgroups. 

An even more basic question is which hidden subgroups can be distinguished from the identity 
via QFS with special attention to the symmetric group. Distinguishing the trivial subgroup {e} 
from a larger subgroup H efficiently using the weak standard method is possible if and only if the 
Li distance Dh between P^ e y and Ph is larger than some inverse polynomial in log \ G\. The L\ 
distance (also known as the total variation distance) is given as 

Du = \G\ s i2 d p\ Yl xpWi- 

We say that H is distinguishable (using the weak standard method) if Dh > (log | C | ) c for some 
constant c, and indistinguishable otherwise. 

Several positive results on the power of QFS for the Hidden Subgroup Problem have been ob- 
tained previously for groups that are in some ways "close" to Abelian, like some semidirect prod- 
ucts of Abelian groups [EH99 ( RB98 ( Kup03 Reg04 MRRS04], in particular the Dihedral group; 



Hamiltonian groups [HRT00|, groups with small commutator groups [IMS01 1 and solvable groups 
of constant exponent and constant length derived series lFIM + 03 1. Often in these cases the irre- 
ducible representations are known and can be analysed. For instance the Dihedral group D n , the 
first non- Abelian group to be analysed in this context by Ettinger and Hoyer [EH99], is "nearly" 
Abelian in the sense that all of its irreducible representations have degree at most two. Indeed hid- 
den reflections of D n can be distinguished from the identity with only polynomial Quantum Fourier 
Samplings, similar to the Abelian case (where all irreducible representations are one-dimensional). 
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Note, however, that the computational version of the HSP seems much harder: even though a poly- 
nomial number of samples suffice to distinguish hidden reflections information theoretically, no 
efficient reconstruction procedure is known. 

The holy grail of the field is the symmetric group S n , which seems much harder to analyse, 
partly because to this day there is still only partial explicit knowledge about its irreducible represen- 
tations and character values [SagOl ], because most of its subgroups are far from normal (have many 
conjugate subgroups), because most of its irreducible representations have very large dimension 
(2 e ( nlogn )) and the number of different irreducible representations is an exponentially small frac- 
tion of the size of the group, to name just some of the difficulties. The structure of distinguishable 
versus indistinguishable subgroups of S n has remained open. 

The following results have been obtained for the HSP over the symmetric group: The group 
S n being non-Abelian, Quantum Fourier Sampling gives a distribution on both the characters and 
the entries of the corresponding matrix representations. Grigni et al. [G SVV01I show that sam- 
pling the row index in the strong standard method provides no additional information. They also 
show that the additional information provided by the strong method in a random basis scales with 
^/\H\ 2 k{G) /\G\ where k(G) is the number of conjugacy classes of the group G and \H\ the size 
of the hidden subgroup. Both Hallgren et al. and Grigni et al. [HRTOO GSVV01 ] show that hidden 
subgroups of S n of size \H\ = 2, generated by involutions with large support, cannot be distin- 
guished from identity; exactly the task that needs to be solved for Graph Automorphism. Recently, 
Moore et al. have essentially shown that the strong standard method cannot distinguish the subgroup 
generated by a fixed point free involution from identity [MRS05 1. Moreover, even a generalization 
of the strong standard method to 0(n log n) instances of Quantum Fourier Sampling does not allow 
to distinguish the above subgroup from 1 No results are known for other subgroups of S n . 

In this work various classical as well as modern parts of the theory of permutation groups are 
applied for the first time in the context of quantum computing. In our applications to the hidden 
subgroup problem, we focus on the weak form of the standard method, since the strong form with 
random choices of basis does not provide any non-negligible additional information for the sym- 
metric group and the subgroups we consider [GSVV01 1. It remains to be seen whether judicious 
choices of basis for each irreducible matrix representation can give more information in the case 
where random choices don't help; but to our knowledge no such examples have been found and in 
fact recent results of Moore et al. [MRS05 1 show that in the case of fixed point free involutions no 
such good basis exists. 

Theorem |C] and Corollary O above provide a complete characterization of subgroups which 
can be distinguished from 1 using the weak standard method (together with classical exhaustive 
search). Indeed, these are exactly the subgroups of S n with bounded minimal degree. For instance 
we cannot distinguish a group generated by a cycle of unbounded length or an involution with 
unbounded number of transpositions (implying the result in I HRTOOl IGS W O 1 ]). 

This also has implications for the Graph Isomorphism (GI) problem. Recall that to solve GI 
for two graphs G\,G2, it suffices to distinguish a hidden subgroup of the automorphism group 
Aut{G\ U G2) of the form H\ x H2 (not G\ ~ G2), where Hi = Aut(G{), from a subgroup 
of the form H U aH (G± ~ G2), where H = H\ x H2 and a maps G\ to G2. Our results 
imply that we cannot distinguish each of the two possible cases from identity, and hence (using the 
triangle inequality) we cannot distinguish them from each other unless Aut(Gj) contains an element 
of bounded support. Thus weak QFS provides no advantage here. 
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3 Arbitrary groups 



In this section we discuss results for arbitrary finite groups G. Our starting point is a general result 
providing both upper and lower bounds on the total variation distance Dh in terms of the same 
group theoretic data. While the definition of Dh involves character degrees and values, which are 
hard to compute, our bounds below involve sizes of conjugacy classes, and their intersections with 
the hidden subgroup. 

We need some group theoretic notation. For h S G we let hP denote the conjugacy class of h 
in G. Let C\, . . . , denote the non-identity conjugacy classes of G. For an irreducible character 
X p G Irr(G) we let Xp{Ci) denote the common value of Xpi x ) f° r elements x G Cj. 

Proposition 1. Let H < G. Then 

k 

1. 5^|(7 i niT| 2 |fl'|- 1 |C i r 1 < D H 

i=l 

k 

2. d h < xi^ nfliicir* = x i^ G r 1/2 - 

i=l l^h£H 

Applying the upper bound with \H\ =2 gives the result obtained previously by Hallgren et 
al. and Grigni et al. IHR T00I iGSVVOll . No lower bounds seem to exist in the literature. This 
result has a wide range of applications. For example, it enables us to characterise distinguishable 
subgroups H < G of polylogarifhmic order (see Theorem |3] below). 

Proof of Proposition^ For each irreducible representation p of G we have 

I £ Xp (h)\< X \XpM< X d P<\ H \ d P- 
h£H,h^l h£H,h^l h£H,h^l 

Hence d p > \H\~ 1 \ YlheH h^i Xp(h)\. Substituting this in Q we obtain 

1 11 1 P heH,h^l 

Note that x P {h) = X P {Ci) if h G H n C { . This yields EheH,h?i X P ( h ) = £?=i \ H H C t |x P (C i ), 
and so 

k 

' " ' p i=l 

Now, 

fc fe 

CilxpiQ)? = Y\ Hn c^MQ)! 2 + X; |ir n n c^ic^Cj). 

i=l i=l 

Using the generalised orthogonality relations we observe that 

X X l# n Ci| 2 |x P (a-)l 2 = X l# n CiPl^l/ICil. 

p i=l i=l 
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and _ 

W n d\\H n CjlxpicjxpiCj) = o. 

It follows that 

Dh > \?4m E 1^ n c i?\ G \/\ c i\ = E 1^ n C t \ 2 \H\~ l \C t \~ l . 

This completes the proof of the lower bound. 
To prove the upper bound, write 

D H \G\=J2d P \ £ XpWI<E d P E IXpWI= E E^M^I- (2) 

p h<=H,h=/=l p heH,hy£l heH,h^l p 

Fix h e H and choose i such that h G Cj. Using the Cauchy-Schwarz inequality we obtain 

E d pM /i )i^(E4) 1/2 (Ei^)i 2 ) 1/2 , 

giving (using the orthogonality relations) 

2>pIxp(*)i < iGi 1/2 (iGi/iai) 1/a = iGmr 1 / 2 . 
p 

Summing over non-identity elements h G iT, and observing that the upper bound above occurs 
|iJ Pi Ci\ times, we obtain 

k 

X; £dpixp(^)i<Ei^ n ^ii G n^r 1/2 - 

h£H,h^=e p i=l 

Combining this with © we obtain 

k 
i=l 

as required. □ 

The following is an immediate consequence of Proposition ^ 

Corollary 2. Let C m i n denote a non-identity conjugacy class of minimal size intersecting H non- 
trivially. Then we have 

\H\ 1 \C m i n \ 1 < Dh < (|-ff| — 1)\C m in\~ • 

We can now prove the main result of this section, characterising distinguishable subgroups of 
polylogarithmic order in an arbitrary group G. 

Theorem 3. Suppose \H\ < (log \ G\) C for some constant c. Then H is distinguishable if and only 
if H has a non-identity element h such that \h G \ < (log |G|) C for some constant d . 
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Proof. 

Suppose first that H is distinguishable, namely Dh > (log for some constant b. Then 

the upper bound in the above corollary shows that 

|#||Cmmr 1/2 > (log|G|)- b , 

SO 

\C mm \ < \H\ 2 (log\G\) 2b ) < (log|G|) 2 ( fc+c ). 

In the other direction, suppose |C m j n | < (log \ G\) b . Then the lower bound in the corollary above 
gives 

J D i/ >|^r 1 (log|G|)- b >(log|G|)-( b+c ). 

The result follows. □ 



4 Symmetric groups 

Let us now focus on the case G = S n . In this section we first prove some preliminary results related 
to distinguishability of subgroups of S n . Some of these results play a role in the proof of Theorem 
151 We also deduce Theorem |C] from Theorem 151 

Proposition 4. Let H < S n with \H\ < n c for some constant c. Then H is distinguishable if and 
only if its minimal degree m(H) is bounded. 

Proof. Let g G S n with supp(g) = k. Then it is straightforward to verify that (^) < | g Sn \ < n k . As 
a consequence we see that a conjugacy class C in S n has polynomial order if and only if it consists 
of elements of bounded support. This observation, when combined with Theorem |3j completes the 
proof. □ 

Our next result concerns primitive subgroups. Primitive permutation groups are considered the 
building blocks of finite permutation groups in general, and were extensively studied over the past 
130 years. We note that if H < S n is primitive and H ^ A n , S n then Babai showed that \H\ < 
n 4^/niogn Using the Classification of Finite Simple Groups the latter bound can be somewhat 
improved to \H\ < 2n^™, which is essentially best possible [Cam81 1; in particular the order of H 
can be much more than polynomial, and so Proposition |4]above does not apply. 

However, we obtain the following somewhat surprising general result: 

Theorem 5. Let H ^ A n , S n be a primitive subgroup. Then H is indistinguishable. Moreover, 
there is an absolute constant e > such that 

D H < n- £ ^. 

This theorem follows immediately from the two technical lemmas below, which are based on 
counting elements of given support in permutation groups H. Recall that for H < S n we set 

H k = {heH : \supp(h)\ = k}. 
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Lemma 6. Let H < S n be a subgroup. Suppose that, for each k < n, we have 

\H k \ < n^-z)\ 

where e > is some fixed constant. Then, ifn is large enough (given e) we have 

D H < 2n- 5m( - H \ 

where 5 = e/2. In particular, if the minimal degree m(H) is unbounded, then H is is indistinguish- 
able. 

Proof: Apply the upper bound of Proposition^ written in the form 

To evaluate this sum we use a result from [LShOl |, showing that, for G = S n and h G G of support 
k we have \ h G \ > n ak for any real a < 1/3 and n large enough (given a). Using this we obtain 

d h < Yl \ H k\n- bk , 

k>m(H) 

for any real number b < 1/6 and sufficiently large n. Let 5 = e/2, b = 1/6 — 5, and m = m(H). 
Then the upper bound on | \ yields 

D H <Y nW 6 - 6 )**"^-*)* = Y n- Sk < 2n- Sm . 

k>m k>m 

This proves the first assertion. Assuming m = m(H) is unbounded, we see that Dh is smaller than 
any fixed negative power of n, and so H is indistinguishable. □ 

Lemma 7. Let H < S n be primitive and H ^ A n , S n . Then for sufficiently large n and for all k 

k 

we have \Hk\ < n 7. 

Proof: We use Babai's lower bound on the minimal degree of primitive subgroups H ^ A n , S n 
[Bab 81 ], showing that 

m(H) > (Vn-l)/2. (3) 

Furthermore, we apply a theorem of Cameron [Cam81 ] (which in turns relies on the Classification 
of Finite Simple Groups) describing all primitive groups of 'large' order. In particular it follows 
from that description that, for all large n, and for a primitive subgroup H ^ A n , S n , either 

(i) \H\ < n cnl/3 ,or 

(ii) n = (2) for some I, and H < Si acting on 2-subsets of {1, ...,/}, or 

(hi) n = I 2 for some /, and H < Si I S2 acting on {1, ... , I} 2 in the so called product action. 

We claim that for all large n and for all k we have \Hk\ < n k / 7 . To show this it suffices to 
consider k > (y/n — l)/2, otherwise \Hk\ = by ©. Now, if H satisfies condition (i) above 
then the claim follows trivially using \Hk\ < \H\. So it remains to consider groups H in cases (ii) 
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and (iii). Here a simple computation based on the known actions of H completes the proof of the 
Lemma. □ 

Theorem|5]now follows by combining the above two lemmas. In fact we obtain, for all primitive 
subgroups H ^ A n , S n , 

D H < 2n~ m W/ 84 < 2n-(^- 1 )/i68. 

The remainder of this section is devoted to reducing Theorem |C]to Theorem iBl 

Lemma 8. Let C be a conjugacy class in S n consisting of elements of support k. Then \C\ > 
c (fc) ■ k~z, where c is an absolute positive constant. 

Proof: There a (^) ways to chose the subset S C {1, ... , re} of letters moved by an element 
h G C. Given the subset S, h\s is a fixed point free permutation of degree k. The number of such 
permutations with a given cycle structure is minimal in the case of a fixed point free involution and 

k 

is in this case equal to k\/2 2 (k/2)\. Using Stirling's formula, we see that this expression is at least 
c\fk\ ■ k~2 . Putting everything together the lemma follows. □ 

Lemma 9. Let H < S n . Then 

D H <a l^l(f) \kl)-*-k*, 

l<k<n ^ ' 

where a is some absolute constant. 



Proof: We use part 2 of Proposition ^ 

d h < J2 \h G r l/2 - 

By Lemma[8]we conclude that 

_ 1 

h£H k \ ' 

The result follows. □ 

Suppose now that Theorem 151 holds and let m = m(H). Substituting 



H k \ < n 




in Lemma [9] we obtain 

D H < an~ £m k^ < an~ sm ■ n\. 

l<k<n 

Therefore, if m is unbounded, Dh is smaller than any inverse polynomial in n, and hence H is 
indistinguishable. Moreover, assuming Dh > n~ c (and n 3 / 4 > a as we may) we obtain em— 2 < c, 
and so 

m < 2/e + c/e. 
Hence Theorem[C]follows from Theorem IE1 
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5 Bounds on the group size in terms of the minimal degree 



In this section we prove Theorem lAl It extends a theorem of Martin Liebeck [L82, L84] which 
bounds the order of transitive groups with large minimal degree. 

We call H a subdirect product subgroup of S l if it is a subdirect product of S\ X ■ ■ ■ X St where 
all the S{ are isomorphic to S. Such an H is called a diagonal subgroup if it is isomorphic to S. 

Lemma 10. Let S be a non-abelian simple group and H a subdirect product subgroup of S l = 
5i x • • • x S t . 

1) Then there is a partition of the set of indices {1, ...,£} and for each part, say {ij 1 , . . . , ij k }, 
a diagonal subgroup D; of Si- x • • • x Si. such that H is a direct product of the subgroups Dj. 

2) Assume that S = A\t(k) for some k > 7 and let D be a diagonal subgroup of S l . Let 
d = (di, . . . ,dt) be an element of D such that d\ is a 3-cycle. Then all the di are 3-cycles. 

Proof. 1 . This is a standard result. 

2. This follows from the fact that the set of 3-cycles is invariant under automorphisms of Alt(fc) 
if k > 7 BDM96I Lemma 8.2. A]. □ 

Let H be a permutation group with minimal degree m = m(H). Denote by fii, . . . , O r the 
orbits of H and set t = max Let £>, = {B^ , . . . , Bi k } a system of blocks of imprimitivity 
for the action of H on fij such that hi > 1 is minimal (if H acts on f2j as a primitive group, then 
ki = |Oj|). Denote by Ki the kernel of the action of H on Bi and the size of the blocks in Bi by 6j. 

r r r 

SetB= U B h K = H Ki and x = ^ (h - 1). Note that K has at least r + x orbits. 

i=l i=l i=l 

Proposition 11. \H/K\ < 5 x t 3n / m . 

Proof. H acts on Bi as a primitive permutation group Pi = H/Ki of degree ki. If Pi does not 
contain Alt(fcj), then, by a result of Praeger and Saxl, [PS 80] we have |Pj| < 4 fc \ Together with 
some trivial computation for small values of ki this implies |Pj| < 5 

Denote by S the intersection of all the Ki for which |Pj| < S^^ 1 holds. Then S acts on each 
either as a trivial group or as a group containing Alt(fcj) where fcj > 7. Without loss of generality 
one can assume that S acts trivially on Bi exactly if i > q. The group A = (S/K)' is a subdirect 
product subgroup of Alt(&i) x • • • x A\t(k q ). Denoting by A the inverse image of A in S we see 
that \H/A\ < 5^ holds. 

To complete the proof it is enough to show that 

\A/K\ = \A\ < t 3n / m . 

It follows from LemmaflOlthat A is a direct product of diagonal subgroups Aj. Each Aj acts as 
an alternating group Alt(rij) on some systems of blocks Bi with nj = ki, trivially on the rest and is 
isomorphic to Alt(nj). 

We claim that the sum of the block-sizes bi corresponding to Aj is at least m/3. To simplify 

notation we assume that Aj acts trivially on Bi exactly if i > p. By Lemma [TO] there is an element 

aj of Aj which acts as a 3-cycle on each Bi for i < p. This element corresponds to an element ~a~j 

VP 

of A which moves at most 3 ^ 6^ elements. Hence 3 Yl bi > m as claimed. 

i=\ i=l 
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It follows that each Aj moves at least nj-m/3 points. This implies that the sum of the tij for all 
diagonal subgroups Aj is at most 3n/m. Each Aj has order \rij\ < t n K Hence \A\ < t 3n / m as 
required. □ 

We are now ready to prove Theorem 1X1 

Proof of Theorem^ Set t = min(m, log 2 n). We have to show that \G\ < n 10 7 . Denote by 
Ai, . . . , A t the orbits of G. Let T>\ = {Dn, . . . , D^.} be a system of blocks of imprimitivity for 

the action of G on Aj, such that the block size di is at least I and d{ is as small as possible with this 

t 

restriction (if there are no proper blocks of size > t then we set Dn = Aj). G acts on V = [j T>i 

i=i 

— 

as a permutation group of degree at most njl. Hence the kernel H of the action has index < ne 
in G. 

Denote by fix, . . . ,Q r the orbits of H and let B%,...,B r be systems of imprimitivity as in 
Proposition By the construction of H it is clear that we have 6j < I for each i. Applying 
Proposition ^2 we obtain a subgroup K of index < 5 x n 3n / m such that K has at least r + x orbits 
and each orbit has size < I. 

We apply Proposition ITT1 to K to obtain a subgroup K\ of index < 5 X1 ■ £ 3n / m in K, which has 
at least r + x + x\ orbits, each of size < |. 

Continuing in this fashion we obtain a descending series of subgroups K > K\ > K2 > • • • > 
K v = 1. The maximal size of an orbit of Ki is at most l/2 l , hence the above series of subgroups 
has length v < log 2 £. 

Since Ki has at least r + x + x\ + • • • + x\ orbits we have x + x± + • • • + x v < n. Hence 

0-1 3n ( (lost) 2 ) 

\H\ = \H/K\ ■ \K/Ki\ T] \Ki/K i+1 \ < 5 n n 3n / m ■ (£^/my < 5 n . n 3n/e . 2 V 1 J < 

i=l 

5 n n 3n/£ . 2 3n-9/8 < n 3n/£ . 2 6n_ Therefore we have |C| < n <tn/l . 2 6n < n 10f as required _ Q 



6 Counting elements of given support 

This section, which is the longest in this paper, is devoted to the proof of Theorem |Bj The main 
ingredients of the proof are Theorem|XJand Proposition |5] 
We will use the following inequality many times. 

Proposition 12. Let x, y, n be positive integers such that x + y < n. Then (™) (™) < ( a ,™j / )2 2 ^ +i/ ^ 
holds. 

Proof In fact we claim that the stronger inequality (")(") < (^"^ 2 holds. This is equivalent 

to 

n(n — 1) ... (n — x + l)n(n — 1) . . . (n — y + 1) ^ (x + y N 
n(n — 1) . . . (n — x — y + 1) — \ y 

which is equivalent to 

n(n — 1) . . . (n — y + 1) ^ (x + y)(x + y — 1) . . . (x + 1) 



(n — x) . . . (n — x — y + 1) 
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But this follows by multiplying the inequalities 



n-t x + y-t 

< for t = 0, 1, . . . , y — 1. 



n — x — t y — t 
These latter inequalities follow from x + y < n. □ 

To avoid some technical difficulties we first prove TheoremlBldirectlv in the case when fc is very 
large. 

Lemma 13. Let H be a permutation group of degree n and minimal degree m > 100 000. As- 
sume that k > 773 + 100 and k > 2 100000 . Then there exists a constant e > such that \Hk\ < 

(^(fc!)in- £m holds. 

Proof. We have to count elements h G H with supp(/i) = k. There are at most (^) choices for 

supp(fo) and given this by Theorem|A]there are at most k i« ooo choices for h itself. We have to show 
that 



Ifcioooo < I ] [k\)4n 



This is equivalent to 

which follows from 
This in turn is implied by 

which reduces to 



fc moo . n lem < (fc!) 

fc 



n k ■ fcsooo • n 2ek < (fc!)5. 



n K ■ k sooo k A£K < ( - 
e 



k\ 2 fc 



77,3 (e • fc7500 +2e ) < fc 

which follows from our conditions if e is small enough. □ 

We now fix a > 10 000 such that if H is a primitive permutation group of degree n > a not 
containing Alt(n), then m(H) > 100 and \Hk\ < ra fe / 7 . This is possible by [Bab81 1 and LemmaQ 
above. 

Next, we introduce some notation which will be used in the rest of this section. Let G be a 
permutation group of degree n with no fixed points. Denote by Qi, O2, . . . , the orbits of G. Let 
Bi = {Bn, Bi2, . . . } be a system of blocks of imprimitivity for the action of G on Jlj, such that 
I > 2 is minimal. Then the setwise stabiliser of the blocks By in G acts as some primitive 
group Pij on Bij. The Pjj are permutation equivalent for i fixed. 

We partition the set of blocks B = [j Bi into 3 subsets as follows. Denote by S = {Si, S2, ■ ■ ■ } 
the set of blocks of size < a. Denote by A = {A\, A2, ■ ■ ■} the set of blocks B^ in B \ S for 
which contains Alt(Bij), and denote by C = {L\, L2, . . . , } the set of the remaining blocks. 
Set S = U Si, A = U Ai and L = |J L,. It is clear that any g G G fixes the sets S, L and A. We 
denote the action of g G G on a set X (fixed by g) by gx and the action of G on a fixed set X by 

Our next lemma shows that in a sense there are not too many possibilities for the action of some 
g G G on the set S U L. 
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Lemma 14. \) The number of pairs (supp(gs), g %) for permutations g with |supp(p)| = k, |supp(^) 
x and |supp(g^)| = y is at most ( ^ k-x-y i ^ 2 ak ■ j-j/Kf+TBo) 



2) Given supp(gs), the number of possible actions g$ is at most a 



k—x—y 



k—x—y 
2 



!. In fact this 



is an upper bound for the number of possible actions on supp(gs) of elements h which fix supp(<7s). 
Proof. If g moves a point of some block, then it moves at least two points of the block. Hence the 



k—x—y 
2 



These blocks can 



number t of blocks in S which contain points from supp(g) is at most 
be chosen in at most (™) ways. Given these blocks the number of choices for supp(gs') is at most 

(2 a y. 

Note that g$ (or h G G fixing supp(gs)) moves a%, a,2, ■ ■ ■ , at given points of the chosen blocks 



k—x—y 



! ways, proving 2). 



in at most a x \a 2 \ ...a t \-t\< \\ a a * ■ t\ < a k ~ x - y 

8=1 

Each block in C which contains points of supp(g) contains at least 100 such points (by the 
choice of a, see the notation introduced after Lemma [T3b. hence the number I of such blocks is at 
most x/100. These blocks can be chosen in at most (™) < num /£\ ways. 

There are i\ < i blocks from C fully contained in supp(g) and these can be chosen in at most 
2 e ways. 

By our assumption on the blocks in C and the Praeger-Saxl theorem [PS80| the stabilisers of 
a block B{j in C can act on the block in at most ways. This implies that the stabiliser of the 
union of the above blocks can act on this union in at most 4 x £i! ways. Hence this is an upper bound 
for the number of actions of g on the blocks contained in supp(g). 

Assume that on the remaining blocks (which are as sets fixed by g) g acts as a permutation of 
degree xi,x 2 , ■ ■ ■ ■ The number x\,X2,... can be chosen in at most 2 X ways. Given these numbers 
the number of actions of g on these remaining blocks can be chosen in at most n Xl//7 • n X2//7 • • • < 
n x / 7 ways by LemmaQ 

Altogether the number of choices for supp(gs) and g^ is at most 



as required. □ 



n 



2 at (n^o/£\)2 e 4: X £ l l2 x -n x/7 < 




n f+TSo2 afc 



Corollary 15. The number of pairs (supp (gs), Ql) for permutations g with |supp(<7)| = k and 
|supp(g,4)| = y is at most 



n\ 2 
k 



. 2 ( a + 4 ) fc ifk < nl+TSo 



and n is sufficiently large. 



Proof. We first claim that the number of permutations g considered is at most ~ ^ i h- y ] ) 2^ a+1 ^ k . 
By Lemma[T4lit is sufficient to prove that for all x < k we have 



2 ak n x ^+Tk) < — [ rJ 1 i ] 2^ k . 
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This is obvious if x = 0, otherwise we have x > 100. By Proposition [T2l 



n 

k—x—y 
2 



[f] 



< 



holds, hence it is enough to show that n x (? + ioo)+ 2 < 

2 I 1 

k < ras" 1 " ioo . 

Using Proposition IT2l we obtain that 



n 

2 



But this follows using 100 < x < 




2 (a+l)fc < - 



n 



n 



-i 



2 (a+2)£: 



< 



1 /n\ 2 



n\k 



>(a+3)fc 



< 



1 /n\ 2 



n\k 



!n -[f] 2 (a+4)fc 



< 





i 






2 


y 


Uv 




.2. 



!n -| 2 (a+4)fc 



proving the corollary. □ 

The most difficult part of the proof of Theorem |B] is when y is large compared to m. The 
following result implies Theorem|B]in the case when this holds and moreover k\ is large compared 
to n y . 

2 , 1 o 

Lemma 16. Ai'SMme f/zaf m > 100 000, k < na + ioo, n v < k\ and k is sufficiently large (in 
particular k > 2 100000 j. Then the number of permutations g with |supp(g)| = k and |supp(g J 4)| = y 

is at most (^) 2 (k\)^n~6o. 

Proof. The number of choices for supp(g^) is at most Q). Hence by Corollary ^] the number of 
choices for supp(<?) is at most 



i 

n\ 2 



!n _| 2(a+ 4) fc /n 



< 



l 

n\ 2 



| 9 (a+4)fe 



n 2 2 



Using Theorem|A]we see that the number of choices for g is at most 



i i 
n\ 2 v /„j . k I n\ 2 



n | 2 (a+4)fc A;I ^ < j n \ (^s.jtaii^M^.n-s, 



If A; is large enough (compared to the constant a) then (k\) 20 > k 10000 .2( a+4 ) fe and our statement 
holds. □ 

Next we describe an important subgroup of G. Consider the set consisting of the points in S 
and L and the blocks in A. Let K be the kernel of the action of G on this set. By definition K fixes 
all the points outside A. Moreover, if Ai £ A, then the action Ki of K on ^4, is a normal subgroup 
of the action of the stabiliser of Ai in G, hence it is either Sym(ylj), Alt(Aj) or 1. 
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Without loss of generality one can assume that K acts trivially on A{ exactly if i > q. Now 
K is a subdirect product of the Ki, therefore its commutator subgroup K' is a subdirect product 
subgroup of Alt (Ai) x • • • x Alt (A q ). Hence by Lemma ITOl K' is a direct product of diagonal 
subgroups Dj. Each Dj acts as an alternating group Alt(nj) on some blocks Ai of size nj. By 
Lemma no]Dj contains an element dj which acts as a 3-cycle on each of the corresponding Ai. 

Hence Dj acts non-trivially on at least y blocks Ai (since |supp(c?j ) | > m). Now K is a subgroup 

q 

of the normaliser N of K' in Yl Sym(Ai). Clearly N is a direct product of groups Nj > Dj where 

i=i 

Nj is isomorphic to Sym(rij) and contains Dj = Alt(nj) in a natural way. 

Proposition 17. There are at most elements g of K with |supp(<?)| = h (where m = m(G)). 

Proof. We have a unique decomposition g = g\g2 ■ ■ ■ where gj £ Nj. Let us choose for each j a 
block on which Nj acts non-trivially. It is clear that gj is determined uniquely by its action on the 
chosen block. Therefore g is determined by its action on the union U of the chosen blocks. 

It follows by the above discussion that |supp(<?) PiU\ < Hence the number of choices for g 

Zh 3h 

is at most | U\ ™ < n ™ . □ 

Proposition 18. Assume that m > 100 000. Then the number of permutations g with gsvjL fixed 
and supp(gA) = V is at most n ^/ 5000 . 

Proof. The coset gK is determined by gsuL and the action of g on the blocks in A. Now g can 
move at most t < ^ blocks in A. 

The number of choices for these blocks is less than ( n { a ) and given these blocks the number of 

ways g can act on them is at most t\. Hence g can act in at most (^J LaJ + (^) +••• < n« 
ways on A. If gK contains another element / with |supp(/)| = k and |supp(/a)| = y, then 
gf^ 1 G K and |(supp(gr/^" 1 )| < 2y. Hence by Proposition [T71 there are at most n™ < moooo such 
elements gf^ 1 . Of course g and gf~ x determines /. Altogether we see that the number of elements 

y 

g considered is at most n sooo . □ 

Remark. As the proof shows (see also the proof of Proposition \1 71 and the preceding discussion) 
the conclusion of Proposition\W\holds under the much weaker assumption that all elements of order 
3 in G move at least 100 000 points. 

2 I 1 

Proposition 19. Assume that m > 100 000, k < res^ioo, y ^ and n is sufficiently large. 
Then the number of permutations g G G with |supp(g)| = k and |supp(<7 J 4)| = y is at most 

(2)^n-2 + 5mk\2 ( - a+ ^ k . 

Proof. By Corollary \^\ the number of possibilities for supp^su^) is at most 
(fc) 5 [I] ' n ^ " 2^ a+/ ^ k . Therefore the number of possibilities for gsuL is at most 



i 



n\ 2 



Hence by Proposition IT8l the number of choices for g is at most 

i 

77, 2 T 5000 • 



n\ 2 y _i_ v 
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as required. □ 

The next result as a counterpart of Lemma[T6ldeals with the case when n y is large compared to 
kl (and y is large compared to m). 



Z , j. y 

Corollary 20. Assume that k < n3+Too, n« > kl and m is sufficiently large. Then the number of 

1 y 

permutations g with |supp(g)| = k and supp^^)! = y is at most (^) 2 n~5. 



Proof. We have m < k < n, hence if m is large enough Proposition [T9l is applicable. Moreover, 
we have 2( a+4 ) fc < fc! if m is large enough (compared to the fixed constant a). 
Hence in this case we have 

n\ 5 _v,^i_ , (a+4)k , /nV _y + _u_ + y (n\ 5 
I n 2 + 5ooo (&!2^^ K ) < I I n 2 + 5000 + 4 < I ) n ■ 

□ 

To deal with the case when kl and n y are "almost equal" we have to introduce further ideas and 
notation. We call a pair of the form (supp(<7s), gi) thick if the elements g which correspond to it 
act in at least (k\)e different ways on supp(gs') and call a pair thin otherwise. 

Proposition 21. Assume that m > 100 000, 2 200a < k < ns+ioo, y ^ and n is sufficiently 
large. Then the number of permutations g with |supp(g)| = k and |supp(^)| = y for which 



(supp(gs), gjf) is thin is at most (?) 2 (kl) 0^ 100 . 



Proof. By Corollary [T31the number of possibilities for the pair (supp(gs), gjf) is at most (?J 2 [|] ! 
2(a+4)fc jj ence me num ber of possibilities for gsuL is at most 



y 

n 2 ■ 



1 , . 1 



V /c / - 2 - V k J - 2- 

(we used the condition 200a < log k). Using Proposition we see that the total number of 
elements g considered is at most 



7? 



1 i 
2 



y 1 y 

2 + 5000 


y 






.2. 





(A:!)6 + iTK7n~2 + 5ooo ii ! < (fc!)e 



n\ 2 1 , 1 



100 



2 1 1 



(using y < k < ns + ioo). □ 



Proposition 22. Let (supp(gs), gjf) be a thick pair. Denote the action of {the stabiliser ofsupp(gs) 
in) G on supp(gs) by H. There is an element 7 which corresponds to this pair such that the 
centraliser 0/75 in H has order at most 

(5a) k ~ x -y \ k ~ X ~ V \./{k\)\. 
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Proof. Bv Lemma [l4T 2') H has order at most a k x y — |— ^ !. By a result of Kovacs and Robin- 
son IKR93I the number k(H) of conjugacy classes of the permutation group H is at most ^ k ~ x -y_ 
Using a well-known identity we obtain 



C H (h) = k(H)\H\ < {5a) k - x - y 



heH 



k — x — y 



Since by definition we have at least (k\)c> choices for g$ £ H, at least one of them has small 
centraliser as required. □ 

Proposition 23. Assume that m > 100 000, k > 2 100000 and y ^ 0. Let 
(supp(gs), gi) be a thick pair and 7 a corresponding permutation with small centraliser as above. 
The number of elements g which correspond to this pair and satisfy the condition 



|supp( ffA ) nsupp(7 j4 )| > 



y 

100 



is at most a k k 4 + 10 000 n 0.495iy / r|j |_ 

Proof. The number of choices for the set supp(g^) H supp(7 J 4) is less than 2 y . The number of 
choices for the rest of supp(<7yi) is at most ([099^])- Given these sets (and hence supp(g)) by 

Theorem |A]the number of choices for g is at most k 10 000 . It follows that the number of choices for 
g is less than 



2 k n°- 99y kTmm I 



y 
12 



Another estimate for the number of possible choices for g is the following. The number of choices 



f° r 9suL is at most a k x y 
choices for g is less than 



k—x—y 
2 



! by Lemma IT4T 2). Hence by Proposition IT8l the number of 



k~x-y 



k — X 



Insooo < a k k 2 nsooo 



A third estimate follows immediately from these; the number of choices for g is at most 



a k ■ k 2 nsooo . 2 k ■ n°' 99y ■ k 10 000 
as required. □ 



)7 






.2. 



! < a k k^ + Tom>n OA95ly 



Proposition 24. Assume that m > 100 000 and k > 2 100000 . Let (suppf^s), gi) be a thick pair 
and 7 a corresponding permutation with small centralizer ( as in Proposition \22\ . The number of 
elements g which correspond to this pair and satisfy 



is at most 



|supp(sr A ) n supp(7^ 



n3o • k 3 ^10 000 (5a) 



< 



100 
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Proof. Let us consider the commutator [7,5]. By [DM96 Exercise 1.6.7] we have 

3y 



l su PP([7,s]) n A\ < 3|supp(^) nsupp(7 j4 )| < 



100 



3y 

Hence the number of choices for supp([7, g])n A is at most nioo . Note that supp([7, g])(l(SUL) < 
supp(75ui) (which is fixed). Using Theorem|^we obtain that the number of choices for [7, g] is at 
most nwo ■ k 10000 . This commutator, together with 7, determines g~ 1 ~ig = 7(7,5]. If h is another 
element with h jh = g ,_ 75, then ghr 1 centralises 7. Hence by the choice of 7 in Proposition l22t 
the number of possibilities for h$ is less than 

k - y 



(5a) 



Hence we have at most nioo • &;ioooo(5a) fc 

number of choices for g is at most n^ooo by Proposition [T8J Therefore the number of choices for g 
is at most 



k-y 

2 



(*!) 



(A;!) e choices for gsuL and given this, the 



nwo ■ nsooo (5a) fc 1 



! / I ! < nso • £;3+Toooo(5af 



□ 



Our next result which builds on most of the earlier ones in this section implies Theorem |H]if y 
is large compared to m. 

2 , 1 

Lemma 25 (Main Lemma). Assume that k < n 3 + 100 , y ^ and m is sufficiently large. Then the 
number of permutations g with |supp(_g)| = k and \sxxpp(gA)\ = V is at most (?) 5 (k\) ln _ 2oo. 

Proof. By LemmafTBIand Corollary l20l we may assume that n 3y > k\ > n& . By Proposition I2T1 the 
number of permutations g with a thin pair (supp(#s), gjf) is at most 
11 1 
n ^j\k\)l + ^o < P^V < Q 2 (fc!)3n"TM. 

It remains to bound the number of permutations g with a thick pair. By Corollary [21 the number of 

possibilities for (supp ( 05 ), gif) is at most [|1 !n~2 • 2^ a+4 ^. Given this, by Propositions l23l 
and|24]the number of choices for g is at most 



(a k k 



f+OTn - 4951 ^ + (5a) fe ^ 

3y 



10 000 nso 



) 



< (Wa) k (k\)^nTom> ( n a4951 f + • n») 

< (Wa) k (kl)^n 0A954y I 



y 
12 
~y 
.2 



(we used the inequality n 3y > (~ ) fe ). Hence the total number of permutations g with a thick pair is 
at most 
(l)^(k\)^n-° mey ({10a) k 2^ a+ ^ k ). If m and hence k is large enough, then 



(10a) fe 2( a+4 ) fc < i(fc!)3ffe> < -rides. 



Our statement follows. □ 
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Next we prove Theorem|B]in the case when x is large compared to 



in. 



Proposition 26. Assume that x ^ 0, n3 + ioo > k > 2 100000 and m is sufficiently large. Then 
the number of permutations g with |supp(p)| = k, \supp(gi)\ = x and |supp(^)| = y is at most 



i 



i 



(™) 2 (/c!)4n _ 2oo()o. 



Proof. If y > j^q, then our statement follows from the Main Lemma. Assume now that y < 
By LemmafTHthe number of choices for supp(g) is at most ^ r fc-S^ i J 2 ak n x (^ + wo^ ■ (™). Hence, 

by Theorem lAl the number of choices for g is at most ^ r fc-^-a i ^ 2 afc n z (7+Too) Q)/cToooo (since we 
can assume that m > 100 000). Using Proposition 1721 and y < we see that this is at most 



< 



k J I V[f] 



If m and hence k is large enough compared to a, we have 2( a+2 ) fc /cToooo < (fc!)?. Using 100 < 
x < k < ns+Too we see that n^+ioo) / ( r "i ) < n^iiio. Our statement follows. □ 



/ v l 2 j y 

Let us return to the notation introduced after Lemma ^] If Si € S is a small block, such that 
g moves at least 3 points of Si, then we denote |supp(g) n Si\ by 2j. We set z{g) = Y^ z i (f° r a ^ 
such i). 

Proposition 27. Assume that z ^ 0, ns+Too > k > 2 100000 anJ m w sufficiently large. Then the 
number of permutations g with z{g) = z is at most (^) 2 (k\)*n~ soo ooo. 

Proof. If x > |j or y > ^j, then our statement follows from Lemma l25l and Proposition l26l 
Assume otherwise. If g moves a point of some block, then it moves at least two points of the block. 
Hence the number of blocks in S which contain two points from supp(g) is at most [^p] - These 

blocks can be chosen in at most ^ [!^\ ^ ways. The blocks in S which contain at least 3 points 
from supp(g) can be chosen in at most ( njh ) ways. Given these blocks the number of choices for 



supp (gs) is at most 

> 

supp(g) is at most 



n \l n \ ,„ a 2[*=*] < l n V 2 2k. 2 ak I " \ I' " 



Using n3 + ioo > k > z we see that ( j"j J nzo < ^ ^ ) 2 Z . Hence the number of choices for 



i 

" N \( a + 3 ) k n -^n x+ y <{ n \ ^2^ k n~m. 

The number of choices for g itself is at most (^) 2 re~ so ioooo which is less than 2 n so (fc!) 4 

if k is large enough. □ 



23 



Denote the number of small blocks Si £ S fixed by g such that |supp(g) Pi Si\ = 2 by v(g). On 
these blocks g acts as a transposition. 

Proposition 28. Assume that n3 + Too > k > 2 100 000 and m is sufficiently large, then the number 



of permutations g with v(g) = v > is at most (^) 2 (fc!) 4 



77, 800 000 000 . 



Proof. If x + y + z > , then our statement follows from the previous results. Assume otherwise. 
Suppose first that k\ > nwo . The number of choices for small blocks Si with |supp(p) Pi Si\ = 2 is 
at most ^ jfci J . Hence the number of choices for all the pairs supp(g) n Si in these blocks is at most 

li) (a 2 )t^ < ('£) 2 (2a) fc . The number of choices for supp(g) is then at most 

{2a) k n x+ y +z < (2a) k (kl)TU. 

Hence by Theorem |X] the number of choices for g itself is at most (I) 2 (2a) k (k\)w k ioooo which 
is less then (^)^(fc!) 5 if m i s large enough. Therefore in this case the number of permutations g 

is at most (?) 2 (fc!)4n _ soo . Suppose now that fc! < nwo. To any permutation g G G we assign 
a permutation obtained by "forgetting about" [y^] transpositions in the small blocks Sj of the 
smallest index j (which g fixes and for which |supp(g) Pi Sj\ = 2). Note that if g = h then 
|supp(g/i -1 )| < y> hence we have g = h. That is g uniquely determines g. The number of choices 
for supp(y) is at most 



[§] " [TO 

The number of choices for g and hence g is at most 



i , . i 



1 (2a) n ion woo • k! < II n ioniooo(fc!) z 
if m is large enough. Hence in this case the number of choices for g is at most 

n\ 2 _rn m m { n\ 2 _ «i 

1 n ion 1000 n so < I 1 • n 20 . 

This completes the proof of the proposition. □ 
We need the following auxiliary result. 

Lemma 29. Let H be a permutation group of degree n such that each element of order 3 moves at 

2 

least 100 000 points. Assume that k < n'-s and k is sufficiently large. Then 

1 



™<(:) 3 <^. 
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Proof. Let g 6 H be apermutation with |supp(g)| = k and |supp(p^)| = 2/- Using Corollary [TBlwe 
see that the number of choices for gsuL is at most 
(fc) 2 [f] !2( a+4 ) fe n~ 2 A;! which is less than | (^) 2 (/c!) 2 n~ 2 if A; is large enough. By the remark after 

Proposition IT8l the number of possibilities for g is at most \ (^) 2 {k\) 2 rT 2 • narno < ^ (^) 2 (fc!) 2 . 
Summing over the fc ways to chose y, our statement follows. □ 

Proposition 30. Assume that n3 > k > 2 10000 anJ m w sufficiently large. Then the number of 
permutations g with v(g) = v < jfc is at most Cl) 5 (A;!) 4 n~ soo 000 000 . 

Proof. Just like in the proof of Proposition l28l we might assume that x + y + z < T^go • Note 
that in the proof of Proposition 1281 we do not use the condition on v in the case k\ > nwo, so 
our statement follows in this case. Now assume that fc! < nS. The number of choices for the 
x + y + z + 2v points of supp(g) which are not contained in the two-element blocks moved by g 
is at most n x +v+ z + 2v < n T + Tooo . Let us fix such a set R of x + y + z + 2v points and count the 
permutations g which correspond to R. Denote by V the set of two-element blocks disjoint from R. 
Each of the permutations g considered induces a permutation g of V of support \(k — \R\)- It is 

2 

clear that supp(g) and R determine supp(g). Assume first that k > \V\~s. In this case the number 
of choices for the two-element blocks moved by g is at most \V\ 2 < k^ k < k\. Hence the number 
of choices for supp(g) is at most n~ ■ k\ < n~ + wo . Applying Theorem 1X1 the number of choices 

to I to k /fl\ 

for g itself is bounded by n 4 + 100 A; 10 000 < 2 . In this case our statement follows. Assume now 

2 -~- ^ 

that k < \V\ 3 . Consider the permutation group G generated by all the permutations g. We claim 

that each element of order 3 in G moves at least ^ points (of V). For otherwise let h be an element 

of order 3 in G with |supp(/i)| < ^. Now h can be written as a product h = g\ . . . g t in G (where 

the % are from the above generating set of G, i.e. each gi comes from one of the g). Consider 

h = g% . . . gt G G. It has order divisible by 3 and hence h 2 is non-trivial. But h 2 moves only 

points in R and the points corresponding to the two-element blocks in supp(/i). Hence we have 

|supp(/i 2 )| < y + \R\ < m > a contradiction. Applying Lemma l29l we see that the number of 

possibilities for supp(g) is at most f j^j ^ ~ (A;!) 2 < ( [S] ) ^ n ™ ^ m i s large enough. Hence the 
number of choices for supp(g) is at most 

(~y \ "2 TO / \ 2 TO I TO 

p l J n 4 A;! < y r & 1 J n 4 + 100 which implies our state- 
ment. □ 

Putting together Lemma [T3l Proposition |28] and Proposition |30] we obtain Theorem 151 
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